@sema-agent/client-core 0.98.0 → 0.100.0

package/dist/request/taskRequest.js

@@ -1,8 +1,10 @@
 import { refuseBadDisableSkills, refuseDisableSkillsConflict } from '../disableSkillsWire.js';
 import { ATTACHMENTS_SPEC_KEYS, AttachmentsSpecRefused } from '../attachmentsWireCaps.js';
 import { retiredAttachmentsKeyOf } from '../taskRequestWords.js';
+import { msg, renderMessage } from '../i18n/translate.js';
 import { outputStyleSeatAdmitted } from '../outputStyleSeatCapability.js';
 import { refuseBadApprovalReach } from '../approvalReachWire.js';
+import { HOST_SUPPLIED_KEYS, HostSettingsRefused, UNWIRED_HOST_TURN_SETTINGS, buildHostTurnSettings, hostIntakeSnapshotOf, hostProjectionNotice, hostTurnSettingsOf, intersectHostHooks, rethrowHostResolvedDeferred, } from '../hostTurnSettings.js';
 export const REQUEST_FIELD_MATRIX = [
     { field: 'objective', lanes: ['interactive', 'print', 'utility'], live: false, why: '本 turn 的真实输入,每条车道都必需', whyUtilityLane: '恒座:三条车道都必须带上本次提交的模型面输入' },
     { field: 'sessionId', lanes: ['interactive', 'print', 'utility'], live: false, why: '单命名空间(TP-A Step 2):壳 id 即引擎 session id;print 在非 live 下保留 mock 常量', whyUtilityLane: '恒座:side-channel 提交走**独立**会话 id(壳另铸一个,绝不复用用户会话那一个 —— 复用会把这次提交的转录混进用户会话)' },
@@ -16,6 +18,7 @@ export const REQUEST_FIELD_MATRIX = [
     { field: 'enableFork', lanes: ['interactive', 'print'], live: true, why: '显式布尔才 stamp([503]② fail-OPEN 教训:off 必须显式)', whyUtilityLane: '无座:分叉是会话面的动作,而 side-channel 提交是一次性的独立会话' },
     { field: 'attachments', lanes: ['interactive', 'print'], live: true, why: 'design/133 + G1 缺省开的 turn 边界 attachment', whyUtilityLane: '无座:turn 边界的附件配置属用户会话;side-channel 提交不带附件' },
     { field: 'skills', lanes: ['interactive', 'print'], live: true, why: '本地技能目录投影(布局取 CC 同款);两条车道都由 launchRepl 载入面注入', whyUtilityLane: '无座:技能挂的是工具,与零工具面矛盾' },
+    { field: 'userInvokedSkills', lanes: ['interactive', 'print'], live: true, why: '人用名字点过的技能(sdk `TaskRequest.userInvokedSkills`:非空串数组;这些技能的 allowedTools / disallowedTools 开跑即生效、不出技能卡,只管这一次 run)。两条用户车道都有「人敲 /技能名」的入口 ⇒ 都有座。🔴 放宽方向:值只经片段口给(能力读数 present 才给键);空数组 = 没点名 ⇒ 不 stamp;坏形(不是串数组)装配期响亮拒;名字对不对归引擎判(`config.user_invoked_skill_unknown`)', whyUtilityLane: '无座:技能挂的是工具,与零工具面矛盾(与 skills 一行同理)' },
     { field: 'mcpServers', lanes: ['interactive', 'print'], live: true, why: '本地 .mcp.json 投影;service 单用户门决定是否兑现', whyUtilityLane: '无座:MCP 服务挂的是工具,与零工具面矛盾' },
     { field: 'settings.webSearch', lanes: ['interactive', 'print'], live: true, why: 'SEMA_WEBSEARCH_* / settings.json;per-request 配置赢过部署 env', whyUtilityLane: '无座:联网检索是一只工具,与零工具面矛盾' },
     { field: 'settings.hooks', lanes: ['interactive', 'print'], live: true, why: '[495]① 用户 settings 文件 hooks 逐字上 wire', whyUtilityLane: '无座:hook 挂在工具门上(零工具面没有门),而且 side-channel 是壳自己的提交,不该继承用户那份 hook 表' },
@@ -44,6 +47,7 @@ export const REQUEST_FIELD_MATRIX = [
     { field: 'reasoningEffort', lanes: ['interactive', 'print', 'utility'], live: false, why: '思考档位(sdk `TaskRequest.reasoningEffort` 七词闭集;上游对表外词 400 响亮拒 ⇒ 本层不预铸第二判官)。档位是请求级的位、与车道无关:交互面 = `/effort` 拨盘,无人值守面 = 档位旗。🔴 端交的必须是**档位词**:「思考 token 数」今天没有上游对位(见 `UPSTREAM_ABSENT_REQUEST_INTENTS` 的 `maxThinkingTokens`),别把一个数字折成档位词发出去', whyUtilityLane: '有座:side-channel 该用显式低档(省钱省时);与 model 同一条理由 —— 本车道上这两位都由壳显式给,不跟用户会话的拨盘走' },
     { field: 'model', lanes: ['interactive', 'print', 'utility'], live: false, why: '模型选择(sdk `TaskRequest.model`;交互面 = `/model` 中途换模型的拨盘,无人值守面 = 模型旗 / 部署缺省那一路,side-channel 面 = 壳显式挑的那一只)。三条车道都有来源、都是提交面。🔴 0.79.0 改口:修前「print 的模型走另一条路」这句理由被用户面实测证伪 —— 无人值守车道传了模型名却整键不上请求体,于是同一个坏名字在交互态被引擎 400 点名、在无人值守态却安静换成部署缺省并在首帧回显一个没生效的名字。一个**选择**类声明被静默丢掉,后果与收紧类声明被静默丢掉同形(端不读回执就以为生效)—— 与 `excludeTools` 补 print 座同律。本层原样透传、不预判模型名(名字的合法性归引擎,本层不铸第二判官)', whyUtilityLane: '有座:side-channel 显式挑便宜的那只模型(不跟用户会话的 `/model` 拨盘走)' },
     { field: 'images', lanes: ['interactive', 'print'], live: false, why: '图片输入(sdk `TaskRequest.images`;base64 / url 两形,原样透传)。两条用户车道都是提交面、都有来源:交互面 = 粘贴图与 `@` 图片像素,一次性车道 = 结构化输入里的图片块。张数、单张与合计的座位判定归人类提交装配口 `encodeHumanTurn`(两条车道同一份判定,本表不另判);请求体与图片张数的上限归上游判', whyUtilityLane: '无座:贴图是交互动作,side-channel 的提交体里没有图片块' },
+    { field: 'userAttachments', lanes: ['interactive', 'print'], live: false, why: '请求层附件(sdk `TaskRequest.userAttachments`:挂在这次提交目标上的 `@` 文本类附件条目,引擎铸帧、在第一次模型调用之前判形)。两条用户车道都是提交面、都经同一只装配口 `encodeHumanTurn`(条目只在这台引擎的席位读数判 `yes` 时出;老服务端对这一键 400,所以没有条目就不发);空数组 = 没带附件 ⇒ 整键不 stamp。座位集与 `images` 一行逐字相同', whyUtilityLane: '无座:side-channel 是壳自己的一次性提交,没有用户 `@` 附件' },
     { field: 'resumeAt/resumeAtMode/restoreFiles/rewindFilesTo', lanes: ['interactive'], live: false, why: 'E18 `/rewind` 是交互命令;四键同生同灭(CC-145:core 6.0.0 起 both 臂发 restoreFiles;CC-223 起退役键 rewindFiles 不再有座 —— 交它按表外子键响亮拒;resumeAtMode 是 both/conversation 两臂恒带的排他截语义位)', whyUtilityLane: '无座:回退是交互命令,而 side-channel 是一次性的独立会话,没有可回退的历史' },
     { field: 'clientContext', lanes: ['interactive'], live: false, why: 'IANA 时区 + 可选邮箱 → core 本地化 `# Environment` 的 today;print 同样跑在用户机器上,缺席让引擎误标 (UTC)', gap: true, whyUtilityLane: '无座:本地化 today 的用途在用户会话的环境段,而 side-channel 的系统提示由壳整段给出 —— 这一列我判不准要不要(与本行 `gap` 同一条待办:要补先单独立项)' },
     { field: 'scratchpadDir', lanes: ['interactive'], live: true, why: '[816]③ per-session 暂存目录;print 也有 session,缺席让 `-p` 的工具写不进 exemptDir', gap: true, whyUtilityLane: '无座:per-session 暂存目录是给**工具**写的,零工具面上没人写' },
@@ -122,7 +126,9 @@ const INPUT_KEY_ROUTES = {
     reasoningEffort: row('reasoningEffort'),
     model: row('model'),
     images: row('images'),
+    userAttachments: row('userAttachments'),
     skills: row('skills'),
+    userInvokedSkills: row('userInvokedSkills'),
     mcpServers: row('mcpServers'),
     clientContext: row('clientContext'),
     scratchpadDir: row('scratchpadDir'),
@@ -162,16 +168,26 @@ const INPUT_KEY_ROUTES = {
         why: '思考 token 数上限:sdk `TaskRequest` 上思考强度只有档位词(`reasoningEffort` 七词闭集),没有 token 数这一位;把数字折成档位词 = 替用户编一个他没说过的档位',
     },
     memoryCapture: row('memoryCapture'),
-    memory: row('memory'),
-    fileHistory: row('fileHistory'),
     inheritEnv: row('inheritEnv'),
     requireExistingSession: row('requireExistingSession'),
     disableSkills: row('disableSkills'),
     rewind: row('resumeAt/resumeAtMode/restoreFiles/rewindFilesTo'),
     repo: row('repo'),
     allowTools: row('allowTools'),
+    hostSettings: { via: 'control' },
     settings: { via: 'settings' },
 };
+const HOST_TOP_KEY_ROUTES = {
+    memory: row('memory'),
+    fileHistory: row('fileHistory'),
+};
+const HOST_TOP_KEYS = Object.freeze(Object.keys(HOST_TOP_KEY_ROUTES));
+const _hostTopKeysPin = [true];
+void _hostTopKeysPin;
+const HOST_TOP_ASK_AFTER = 'memoryCapture';
+const HOST_SETTINGS_SUBKEYS = Object.freeze(HOST_SUPPLIED_KEYS.filter((k) => k.startsWith('settings.')).map((k) => k.slice('settings.'.length)));
+const _hostSubkeysPin = [true, true, true];
+void _hostSubkeysPin;
 const SETTINGS_KEY_ROUTES = {
     resolved: row('settings.<resolved>'),
     webSearch: row('settings.webSearch'),
@@ -185,6 +201,8 @@ const liveDefaultKeyNames = () => new Set(LIVE_DEFAULT_FIELDS.flatMap(item => it
 const routeOfTopLevelKey = (key) => {
     if (hasOwn(INPUT_KEY_ROUTES, key))
         return INPUT_KEY_ROUTES[key];
+    if (hasOwn(HOST_TOP_KEY_ROUTES, key))
+        return HOST_TOP_KEY_ROUTES[key];
     if (!key.includes('.') && liveDefaultKeyNames().has(key))
         return { via: 'fixed', cause: 'other_channel' };
     return undefined;
@@ -211,6 +229,42 @@ const OMISSION_JUDGES = {
     not_live: (s, _lane, live) => s.via === 'matrix' && s.spec.live && !live,
 };
 const omissionCauseOf = (s, lane, live) => TASK_REQUEST_OMISSION_CAUSES.find(cause => OMISSION_JUDGES[cause](s, lane, live));
+const hostRefusalNoticeOf = (intake, lane, live) => {
+    const verdictNotice = intake.notice ?? hostProjectionNotice();
+    try {
+        const refusing = intake.refusingKeys;
+        if (refusing.length === 0)
+            return verdictNotice;
+        const turnNotices = intake.turnNotices;
+        const aligned = turnNotices !== undefined && turnNotices.length === refusing.length;
+        for (const [i, key] of refusing.entries()) {
+            if (!hostRefuseRowSeated(key, lane, live))
+                continue;
+            return aligned ? (turnNotices[i] ?? verdictNotice) : verdictNotice;
+        }
+        return undefined;
+    }
+    catch {
+        return verdictNotice;
+    }
+};
+const hostRefuseRowSeated = (key, lane, live) => {
+    if (hasOwn(HOST_TOP_KEY_ROUTES, key)) {
+        const top = HOST_TOP_KEY_ROUTES[key];
+        return top === undefined || (top.via !== 'matrix' && top.via !== 'fixed') || omissionCauseOf(standingOf(top), lane, live) === undefined;
+    }
+    if (!key.startsWith('settings.'))
+        return true;
+    const sub = key.slice('settings.'.length);
+    if (!hasOwn(SETTINGS_KEY_ROUTES, sub))
+        return true;
+    const route = SETTINGS_KEY_ROUTES[sub];
+    if (route === undefined || route.via === 'always')
+        return true;
+    if (route.via === 'matrix' || route.via === 'fixed')
+        return omissionCauseOf(standingOf(route), lane, live) === undefined;
+    return true;
+};
 const REQUEST_LANE_SET = { interactive: true, print: true, utility: true };
 export const REQUEST_LANES = Object.freeze(Object.keys(REQUEST_LANE_SET));
 const refuseBadLane = (lane) => {
@@ -228,6 +282,8 @@ const VALUE_LEVEL_IN_PLAY = Object.freeze({
     oneShot: (v) => v === true,
     interactiveTools: (v) => v === false,
     images: (v) => Array.isArray(v) && v.length > 0,
+    userAttachments: (v) => Array.isArray(v) && v.length > 0,
+    userInvokedSkills: (v) => Array.isArray(v) && v.length > 0,
     attachmentIds: (v) => Array.isArray(v) && v.length > 0,
     excludeTools: (v) => Array.isArray(v) && v.length > 0,
     excludeAllTools: (v) => v === true,
@@ -402,14 +458,50 @@ const resolvedSnapshotForWire = (resolved) => {
     }
     return out;
 };
+export function hostTurnSettings(input) {
+    return buildHostTurnSettings(input, { materialize: (snapshot) => resolvedSnapshotForWire(snapshot), memoryOffDeclared });
+}
+export function refilterHostSettings(request, fresh, lane) {
+    refuseBadLane(lane);
+    const host = hostTurnSettingsOf(fresh);
+    const intake = host === undefined || host === UNWIRED_HOST_TURN_SETTINGS ? undefined : hostIntakeSnapshotOf(host);
+    if (host === undefined || intake === undefined) {
+        throw new TypeError(renderMessage(msg('config.taskRequest.hostSettingsMalformed', { shape: coarseShape(fresh) })));
+    }
+    const refuseNotice = () => intake.notice ?? hostProjectionNotice();
+    if (intake.refuses) {
+        const refusing = hostRefusalNoticeOf(intake, lane, true);
+        if (refusing !== undefined)
+            return Object.freeze({ kind: 'refuse', notice: refusing });
+    }
+    const settings = request.settings;
+    if (!isPlainRecord(settings) || !Object.hasOwn(settings, 'hooks'))
+        return Object.freeze({ kind: 'send', request, hooksDropped: 0 });
+    const disposition = intake.dispositions['settings.hooks'];
+    if (disposition === 'unwired')
+        return Object.freeze({ kind: 'send', request, hooksDropped: 0 });
+    const now = intake.carried.hooks;
+    const sentHooks = settings.hooks;
+    if (!isPlainRecord(sentHooks))
+        return Object.freeze({ kind: 'refuse', notice: refuseNotice() });
+    const cut = intersectHostHooks(sentHooks, now);
+    if (!cut.judged)
+        return Object.freeze({ kind: 'refuse', notice: refuseNotice() });
+    if (cut.dropped === 0)
+        return Object.freeze({ kind: 'send', request, hooksDropped: 0 });
+    const { hooks: _sentHooks, ...restSettings } = settings;
+    void _sentHooks;
+    const nextSettings = cut.hooks === undefined ? restSettings : { ...restSettings, hooks: cut.hooks };
+    const { settings: _sentSettings, ...restRequest } = request;
+    void _sentSettings;
+    const next = Object.keys(nextSettings).length > 0 ? { ...restRequest, settings: nextSettings } : restRequest;
+    return Object.freeze({ kind: 'send', request: next, hooksDropped: cut.dropped });
+}
 export const MEMORY_CAPTURE_OFF = 'off';
 export function memoryCaptureDeclarationField(declared) {
     return declared ? { memoryCapture: MEMORY_CAPTURE_OFF } : {};
 }
 export const MEMORY_OFF = 'off';
-export function memoryOffDeclarationField(declared) {
-    return declared ? { memory: MEMORY_OFF } : {};
-}
 export const FILE_HISTORY_DISABLED = 'disabled';
 export const INHERIT_ENV_WORDS = Object.freeze(['all', 'scrub']);
 export function isInheritEnvWord(v) {
@@ -427,26 +519,16 @@ export function memoryOffDeclared(input) {
     const sm = input.settingsMemory;
     if (sm !== undefined && sm !== null) {
         if (typeof sm !== 'object' || Array.isArray(sm)) {
-            throw new TypeError(`memoryOffDeclared: settings 的 memory 段必须是对象 —— 收到 ${coarseShape(sm)}。`);
+            throw new TypeError(renderMessage(msg('config.taskRequest.memoryOff.settingsSectionNotObject', { shape: coarseShape(sm) })));
         }
         const enabled = sm.enabled;
         if (enabled !== undefined && typeof enabled !== 'boolean') {
-            throw new TypeError(`memoryOffDeclared: settings memory.enabled 在场时必须是布尔 —— 收到 ${coarseShape(enabled)}。`);
+            throw new TypeError(renderMessage(msg('config.taskRequest.memoryOff.enabledNotBoolean', { shape: coarseShape(enabled) })));
         }
         fromSettings = enabled === false;
     }
     return flag === MEMORY_OFF || fromSettings;
 }
-const refuseBadMemoryOff = (v) => {
-    if (v === undefined || v === null)
-        return;
-    if (v === 'off')
-        return;
-    throw new TypeError('buildTaskRequest: memory 只接受字面量 `\'off\'` 或缺席(undefined/null)—— ' +
-        `收到 ${coarseShape(v)}。这一位是**请求级整面开关**(「这一次别给我记忆」),上游是**单成员闭集**(没有 ` +
-        '`"on"`,`{ enabled: false }` 对象形也不是 wire 拼法)且对坏拼写**响亮拒**(server 400 `request.field_invalid`)。' +
-        '本层若静默删键,这一次运行会照常挂上记忆面而声明人不会知道 —— 与 memoryCapture 同一条纪律。错误文本只报形状,不回显值。');
-};
 const withoutRetiredAttachmentsKeys = (v) => {
     if (typeof v !== 'object' || v === null)
         return v;
@@ -530,6 +612,23 @@ const refuseBadAllowTools = (v) => {
         `收到 ${coarseShape(v)}。这一位是**可用性选择器**(收紧声明):本层若把坏形静默删键,这一次运行会挂上声明人以为已经收窄掉的全部工具。` +
         '错误文本只报形状,不回显值。');
 };
+const refuseBadUserInvokedSkills = (v) => {
+    if (v === undefined || v === null)
+        return;
+    if (Array.isArray(v) && v.length <= ALLOW_TOOLS_MAX_LENGTH) {
+        let ok = true;
+        for (let k = 0; k < v.length; k += 1) {
+            const d = Object.getOwnPropertyDescriptor(v, k);
+            if (d === undefined || !('value' in d) || typeof d.value !== 'string') {
+                ok = false;
+                break;
+            }
+        }
+        if (ok)
+            return;
+    }
+    throw new TypeError(renderMessage(msg('config.taskRequest.userInvokedSkillsMalformed', { shape: coarseShape(v) })));
+};
 const refuseBadExcludeAllTools = (v) => {
     if (v === undefined || v === null || v === true || v === false)
         return;
@@ -537,15 +636,6 @@ const refuseBadExcludeAllTools = (v) => {
         `收到 ${coarseShape(v)}。这一位是**整只工具面卸载**的收紧声明:本层若把坏值静默删键,这一次运行会挂上声明人以为已经卸掉的全部工具。` +
         '错误文本只报形状,不回显值。');
 };
-const refuseBadFileHistory = (v) => {
-    if (v === undefined || v === null)
-        return;
-    if (v === FILE_HISTORY_DISABLED)
-        return;
-    throw new TypeError('buildTaskRequest: fileHistory 只接受字面量 `\'disabled\'` 或缺席(undefined/null)—— ' +
-        `收到 ${coarseShape(v)}。这一位是「这一次运行别捕获文件历史」的收紧声明,上游是**单成员闭集**(没有第二个词)且对坏值` +
-        '**响亮拒**。本层若静默删键,这一次运行照常捕获而声明人不会知道。错误文本只报形状,不回显值。');
-};
 const refuseBadInheritEnv = (v) => {
     if (v === undefined || v === null)
         return;
@@ -563,13 +653,16 @@ const refuseBadRequireExistingSession = (v) => {
         '上游对非布尔值同样拒收。错误文本只报形状,不回显值。');
 };
 const hasResumableSessionId = (sid) => typeof sid === 'string' && sid.length > 0;
-const refuseRequireExistingWithoutSession = (requireExisting, sessionId) => {
+const refuseRequireExistingWithoutSession = (requireExisting, sessionId, where = 'buildTaskRequest') => {
     if (requireExisting !== true || hasResumableSessionId(sessionId))
         return;
-    const shape = sessionId === undefined ? '缺席' : typeof sessionId === 'string' ? '空串' : coarseShape(sessionId);
-    throw new TypeError(`buildTaskRequest: requireExistingSession: true 要求续一个已存在的会话,但 sessionId ${shape} —— 没有可续的会话。` +
-        '上游对这一形同样拒收(不会新开会话,也不会续上任何东西);本层在装配前拒,不让它走一次往返。' +
-        '处置:要续哪个会话,就把它的 id 交在 sessionId 上;要开新会话,就别带 requireExistingSession(或给 false)。错误文本只报形状,不回显值。');
+    const shape = sessionId === undefined
+        ? renderMessage(msg('config.taskRequest.requireExisting.shapeAbsent'))
+        : typeof sessionId === 'string'
+            ? renderMessage(msg('config.taskRequest.requireExisting.shapeEmpty'))
+            : coarseShape(sessionId);
+    const layer = renderMessage(msg(where === 'buildTaskRequest' ? 'config.taskRequest.requireExisting.layerAssembly' : 'config.taskRequest.requireExisting.layerLive'));
+    throw new TypeError(renderMessage(msg('config.taskRequest.requireExisting.noSession', { where, shape, layer })));
 };
 const refuseBadMaxTokens = (v) => {
     if (v === undefined || v === null)
@@ -640,15 +733,15 @@ export function parseMaxCostUsd(text) {
         return { ok: false, why: 'not_positive' };
     return { ok: true, value };
 }
-const ACCESSOR_READ_ORDER = ['live', 'memoryCapture', 'memory', 'settings', 'maxCostUsd', 'excludeAllTools', 'maxTokens', 'outputRetries', 'fileHistory', 'inheritEnv', 'requireExistingSession', 'disableSkills', 'approvalReach', 'allowTools'];
-const MATERIALIZE_AT_READ = Object.freeze({ allowTools: (v) => allowToolsSnapshot(v) });
+const ACCESSOR_READ_ORDER = ['live', 'memoryCapture', 'hostSettings', 'settings', 'maxCostUsd', 'excludeAllTools', 'maxTokens', 'outputRetries', 'inheritEnv', 'requireExistingSession', 'disableSkills', 'approvalReach', 'allowTools', 'userInvokedSkills'];
+const MATERIALIZE_AT_READ = Object.freeze({ allowTools: (v) => allowToolsSnapshot(v), userInvokedSkills: (v) => allowToolsSnapshot(v) });
 function dataFirstSnapshot(input, afterData) {
     let descs;
     try {
         descs = Object.getOwnPropertyDescriptors(input);
     }
     catch {
-        throw new TypeError('buildTaskRequest: 入参的键集 / 属性描述符读不出(代理 trap 抛)—— 无法安全快照声明,拒绝装配。错误文本只报形状,不回显值。');
+        throw new TypeError(renderMessage(msg('config.taskRequest.inputKeysUnreadable')));
     }
     const bag = Object.create(null);
     const accessors = [];
@@ -678,39 +771,52 @@ export function assembleTaskRequest(input, lane) {
     let resolvedMaterialized;
     let resolvedMaterializeError;
     let resolvedHookRan = false;
+    let intakeEarly;
+    const materializeAtRead = (product) => (raw) => {
+        resolvedInEarly = raw;
+        try {
+            rethrowHostResolvedDeferred(product);
+            resolvedMaterialized = resolvedSnapshotForWire(resolvedInEarly);
+        }
+        catch (e) {
+            resolvedMaterializeError = e;
+        }
+    };
     const src = dataFirstSnapshot(input, (bag) => {
-        const st = bag['settings'];
-        if (present(st) && typeof st === 'object' && !Array.isArray(st)) {
+        if (!Object.hasOwn(bag, 'hostSettings'))
+            return;
+        const product = hostTurnSettingsOf(bag['hostSettings'], 'shape');
+        if (product !== undefined) {
             resolvedHookRan = true;
-            resolvedInEarly = st.resolved;
-            try {
-                resolvedMaterialized = resolvedSnapshotForWire(resolvedInEarly);
-            }
-            catch (e) {
-                resolvedMaterializeError = e;
-            }
+            intakeEarly = hostIntakeSnapshotOf(product, materializeAtRead(product));
         }
     });
     const live = src.live;
     const memoryCaptureIn = src.memoryCapture;
-    const memoryIn = src.memory;
     const settingsIn = src.settings;
     if (present(settingsIn) && (typeof settingsIn !== 'object' || Array.isArray(settingsIn))) {
         throw new TypeError(`buildTaskRequest: settings 只接受对象或缺席(undefined/null)—— 收到 ${coarseShape(settingsIn)}。` +
             '这一位装着已解析权限面与 hooks:把畸形容器当成「没给」= 请求带着被剥掉的权限面照发。错误文本只报形状,不回显值。');
     }
     const settingsObj = present(settingsIn) ? settingsIn : {};
-    const resolvedIn = resolvedHookRan ? resolvedInEarly : settingsObj.resolved;
+    const hostIn = src.hostSettings;
+    const host = hostTurnSettingsOf(hostIn);
+    if (host === undefined) {
+        throw new TypeError(renderMessage(msg('config.taskRequest.hostSettingsMalformed', { shape: coarseShape(hostIn) })));
+    }
+    const intake = resolvedHookRan ? intakeEarly : hostIntakeSnapshotOf(host, materializeAtRead(host));
+    if (intake === undefined)
+        throw new TypeError(renderMessage(msg('config.taskRequest.hostSettingsMalformed', { shape: coarseShape(hostIn) })));
+    const resolvedIn = resolvedInEarly;
     const resolvedRoute = SETTINGS_KEY_ROUTES.resolved;
     const resolvedOpen = resolvedRoute.via === 'matrix' && omissionCauseOf(standingOf(resolvedRoute), lane, live) === undefined;
-    if (resolvedOpen && resolvedHookRan && resolvedMaterializeError !== undefined)
+    if (resolvedOpen && resolvedMaterializeError !== undefined)
         throw resolvedMaterializeError;
     const resolvedWire = resolvedOpen ? (resolvedMaterialized ?? resolvedSnapshotForWire(resolvedIn)) : {};
     const maxCostUsdIn = src.maxCostUsd;
     const excludeAllToolsIn = src.excludeAllTools;
     const maxTokensIn = src.maxTokens;
     const outputRetriesIn = src.outputRetries;
-    const fileHistoryIn = src.fileHistory;
     const inheritEnvIn = src.inheritEnv;
     const requireExistingSessionIn = src.requireExistingSession;
     const disableSkillsIn = src.disableSkills;
@@ -720,12 +826,10 @@ export function assembleTaskRequest(input, lane) {
     const i = snapshotByName(src, INPUT_KEYS, {
         live,
         memoryCapture: memoryCaptureIn,
-        memory: memoryIn,
         maxCostUsd: maxCostUsdIn,
         maxTokens: maxTokensIn,
         excludeAllTools: excludeAllToolsIn,
         outputRetries: outputRetriesIn,
-        fileHistory: fileHistoryIn,
         inheritEnv: inheritEnvIn,
         requireExistingSession: requireExistingSessionIn,
         disableSkills: disableSkillsIn,
@@ -734,19 +838,26 @@ export function assembleTaskRequest(input, lane) {
         settings: settingsIn,
     });
     const SETTINGS_KEYS = Object.keys(SETTINGS_KEY_ROUTES);
-    const s = snapshotByName(settingsObj, SETTINGS_KEYS, { resolved: resolvedIn });
+    const hostSettingsKeysIn = HOST_SETTINGS_SUBKEYS.filter((k) => hasOwn(settingsObj, k) && present(Reflect.get(settingsObj, k)));
+    const hostTopKeysIn = HOST_TOP_KEYS.filter((k) => hasOwn(src, k) && present(Reflect.get(src, k)));
+    const s = {
+        resolved: resolvedIn,
+        webSearch: intake.carried.webSearch,
+        ultracode: snapshotByName(settingsObj, ['ultracode']).ultracode,
+        hooks: intake.carried.hooks,
+        outputStyle: intake.carried.outputStyle,
+    };
     refuseBadMemoryCapture(memoryCaptureIn);
-    refuseBadMemoryOff(memoryIn);
     refuseBadMaxCostUsd(maxCostUsdIn);
     refuseBadExcludeAllTools(excludeAllToolsIn);
     refuseBadMaxTokens(maxTokensIn);
     refuseBadOutputRetries(outputRetriesIn);
-    refuseBadFileHistory(fileHistoryIn);
     refuseBadInheritEnv(inheritEnvIn);
     refuseBadRequireExistingSession(requireExistingSessionIn);
     refuseBadDisableSkills(disableSkillsIn, 'buildTaskRequest');
     refuseBadApprovalReach(approvalReachIn, 'buildTaskRequest');
     refuseBadAllowTools(allowToolsIn);
+    refuseBadUserInvokedSkills(i.userInvokedSkills);
     const rewindRoute = INPUT_KEY_ROUTES.rewind;
     const RETIRED_REWIND_FILES_KEY = 'rewindFiles';
     const REWIND_KEYS = rewindRoute.via === 'matrix' ? rewindRoute.field.split('/') : [];
@@ -774,6 +885,8 @@ export function assembleTaskRequest(input, lane) {
     for (const key of Object.keys(src)) {
         if (hasOwn(INPUT_KEY_ROUTES, key))
             continue;
+        if (hasOwn(HOST_TOP_KEY_ROUTES, key))
+            continue;
         const stray = Reflect.get(src, key);
         if (!present(stray))
             continue;
@@ -813,6 +926,12 @@ export function assembleTaskRequest(input, lane) {
             '处置:删掉这个键;要在回退会话时一并还原文件,改交 ' +
             'rewind.restoreFiles: true(必须与 rewind.resumeAt 同交);只还原文件、不动会话,交 rewind.rewindFilesTo。错误文本只报键名,不回显值。');
     }
+    if (hostSettingsKeysIn.length > 0 || hostTopKeysIn.length > 0) {
+        throw new TypeError(renderMessage(msg('config.taskRequest.hostSuppliedKeysByHand', {
+            keys: [...hostSettingsKeysIn.map((k) => `settings.${k}`), ...hostTopKeysIn].join(', '),
+            fields: [...hostSettingsKeysIn, ...hostTopKeysIn].map((k) => `${k}: …`).join(', '),
+        })));
+    }
     if (unknownKeys.length > 0) {
         const shown = unknownKeys.slice(0, MAX_UNKNOWN_KEYS_SHOWN).map(keyForDisplay).join(', ');
         const more = unknownKeys.length > MAX_UNKNOWN_KEYS_SHOWN ? ` 等共 ${unknownKeys.length} 个` : '';
@@ -826,6 +945,11 @@ export function assembleTaskRequest(input, lane) {
     refuseRequireExistingWithoutSession(requireExistingSessionIn, i.sessionId);
     refuseDisableSkillsConflict(disableSkillsIn, i.skills, Reflect.get(src, 'agents'), 'buildTaskRequest');
     refuseUtilityWithoutToolUnload(lane, excludeAllToolsIn);
+    if (intake.refuses) {
+        const refusing = hostRefusalNoticeOf(intake, lane, live);
+        if (refusing !== undefined)
+            throw new HostSettingsRefused(refusing);
+    }
     const carries = (route, value, key) => {
         if (route.via === 'always')
             return present(value);
@@ -840,15 +964,25 @@ export function assembleTaskRequest(input, lane) {
         return false;
     };
     const gate = Object.create(null);
-    for (const key of INPUT_KEYS) {
+    const askInput = (key) => {
         const route = INPUT_KEY_ROUTES[key];
         if (route.via === 'settings') {
             for (const sub of SETTINGS_KEYS)
                 gate[`settings.${sub}`] = carries(SETTINGS_KEY_ROUTES[sub], s[sub], `settings.${sub}`);
-            continue;
+            return;
         }
         gate[key] = carries(route, key === 'rewind' ? rewindForGate : i[key], key);
-    }
+    };
+    const anchorAt = INPUT_KEYS.indexOf(HOST_TOP_ASK_AFTER);
+    const hostTopAt = anchorAt < 0 ? INPUT_KEYS.length : anchorAt + 1;
+    for (const key of INPUT_KEYS.slice(0, hostTopAt))
+        askInput(key);
+    const hostTopGate = {
+        memory: carries(HOST_TOP_KEY_ROUTES.memory, intake.carried.memory, 'memory'),
+        fileHistory: carries(HOST_TOP_KEY_ROUTES.fileHistory, intake.carried.fileHistory, 'fileHistory'),
+    };
+    for (const key of INPUT_KEYS.slice(hostTopAt))
+        askInput(key);
     const on = (key) => gate[key] === true;
     const onSetting = (sub) => gate[`settings.${sub}`] === true;
     const settingsOut = {
@@ -867,7 +1001,9 @@ export function assembleTaskRequest(input, lane) {
         ...(on('reasoningEffort') ? { reasoningEffort: i.reasoningEffort } : {}),
         ...(on('model') ? { model: i.model } : {}),
         ...(on('images') ? { images: i.images } : {}),
+        ...(on('userAttachments') ? { userAttachments: [...(i.userAttachments ?? [])] } : {}),
         ...(on('skills') ? { skills: i.skills } : {}),
+        ...(on('userInvokedSkills') ? { userInvokedSkills: allowToolsCopy(i.userInvokedSkills) } : {}),
         ...(on('mcpServers') ? { mcpServers: i.mcpServers } : {}),
         ...(on('rewind') ? rewindWire : {}),
         ...(on('permissionMode') ? { permissionMode: i.permissionMode } : {}),
@@ -894,15 +1030,15 @@ export function assembleTaskRequest(input, lane) {
         ...(on('maxCostUsd') ? { maxCostUsd: maxCostUsdIn } : {}),
         ...(on('maxTokens') ? { maxTokens: i.maxTokens } : {}),
         ...(on('memoryCapture') ? { memoryCapture: 'off' } : {}),
-        ...(on('memory') ? { memory: 'off' } : {}),
-        ...(on('fileHistory') ? { fileHistory: FILE_HISTORY_DISABLED } : {}),
+        ...(hostTopGate.memory ? { memory: 'off' } : {}),
+        ...(hostTopGate.fileHistory ? { fileHistory: FILE_HISTORY_DISABLED } : {}),
         ...(on('inheritEnv') ? { inheritEnv: inheritEnvIn } : {}),
         ...(on('requireExistingSession') ? { requireExistingSession: true } : {}),
         ...(on('disableSkills') ? { disableSkills: true } : {}),
         ...(on('approvalReach') ? { approvalReach: approvalReachIn } : {}),
         ...(Object.keys(settingsOut).length > 0 ? { settings: settingsOut } : {}),
     };
-    return Object.freeze({ request: out, omitted: Object.freeze([...omitted, ...lateOmitted]) });
+    return Object.freeze({ request: out, omitted: Object.freeze([...omitted, ...lateOmitted]), host });
 }
 export function buildTaskRequest(input, lane) {
     return assembleTaskRequest(input, lane).request;
@@ -955,6 +1091,7 @@ export function applyLiveRequestDefaults(req, host) {
         out.sessionId === host.mockSessionIdConstant) {
         delete out.sessionId;
     }
+    refuseRequireExistingWithoutSession(out.requireExistingSession, out.sessionId, 'applyLiveRequestDefaults');
     return out;
 }
 export function unregisteredRequestKeys(req, lane) {

package/dist/resumeRefusalCopy.d.ts

@@ -1,3 +1,4 @@
+import type { UiLanguage } from './env/uiLanguage.js';
 import type { ResumeStartupCause } from '@sema-agent/sdk';
 import { RESUME_CONTEXT_UNAVAILABLE, CHECKPOINT_UNSUPPORTED_VERSION, CHECKPOINT_WALLTIME_AXIS_RETIRED, CHECKPOINT_CONFIG_REFUSED } from './engineErrorCodes.js';
 export declare const RESUME_REFUSAL_CODES: readonly string[];
@@ -7,7 +8,7 @@ export interface ResumeRefusalDetail {
     waitable: boolean;
 }
 export declare function resumeRefusalFromError(err: unknown): ResumeRefusalDetail | null;
-export declare function resumeRefusalContent(detail: ResumeRefusalDetail): string;
+export declare function resumeRefusalContent(detail: ResumeRefusalDetail, lang?: UiLanguage): string;
 export interface ResumePolicyBlockDetail {
     blockedBy: {
         kind: 'named';
@@ -19,7 +20,7 @@ export interface ResumePolicyBlockDetail {
     };
 }
 export declare function resumePolicyBlockFromError(err: unknown): ResumePolicyBlockDetail | null;
-export declare function resumePolicyBlockContent(detail: ResumePolicyBlockDetail): string;
+export declare function resumePolicyBlockContent(detail: ResumePolicyBlockDetail, lang?: UiLanguage): string;
 export { resumeReopenFromError, resumeReopenContent } from './hitl/suspendedReopen.js';
 export type { ResumeReopenDetail } from './hitl/suspendedReopen.js';
 export type RequireExistingSessionRefusalForm = 'session_not_found' | 'session_id_missing';
@@ -28,26 +29,28 @@ export interface RequireExistingSessionRefusalDetail {
     readonly form: RequireExistingSessionRefusalForm;
 }
 export declare function requireExistingSessionRefusalFromError(err: unknown): RequireExistingSessionRefusalDetail | null;
-export declare function requireExistingSessionRefusalContent(detail: Pick<RequireExistingSessionRefusalDetail, 'form'>): string;
+export declare function requireExistingSessionRefusalContent(detail: Pick<RequireExistingSessionRefusalDetail, 'form'>, lang?: UiLanguage): string;
 export interface ResumeContextUnavailableDetail {
     code: typeof RESUME_CONTEXT_UNAVAILABLE;
     staleAfterSec?: number;
     runId?: string;
 }
 export declare function resumeContextUnavailableFromError(err: unknown): ResumeContextUnavailableDetail | null;
-export declare function resumeContextUnavailableContent(d: ResumeContextUnavailableDetail): string;
+export declare function resumeContextUnavailableContent(d: ResumeContextUnavailableDetail, lang?: UiLanguage): string;
 export type ParkedResumeStartupDecision = 'approve' | 'deny';
 export type ParkedResumeStartupCause = 'resume_rejected' | 'undetermined';
 export interface ParkedResumeStartupDetail {
     code: string;
     cause: ParkedResumeStartupCause;
     taskId?: string;
-    startupCause?: ResumeStartupCause;
+    startupCause?: ResumeStartupCause | ResumeCauseCoreAhead;
     resendable: false;
     denyStaysOpen: true;
 }
+declare const RESUME_CAUSE_CORE_AHEAD: readonly ["transcript_corrupt"];
+type ResumeCauseCoreAhead = Exclude<(typeof RESUME_CAUSE_CORE_AHEAD)[number], ResumeStartupCause>;
 export declare function parkedResumeStartupFromError(err: unknown, decision?: ParkedResumeStartupDecision): ParkedResumeStartupDetail | null;
-export declare function parkedResumeStartupContent(detail: ParkedResumeStartupDetail): string;
+export declare function parkedResumeStartupContent(detail: ParkedResumeStartupDetail, lang?: UiLanguage): string;
 export interface CheckpointUnsupportedVersionDetail {
     code: 'checkpoint.unsupported_version';
     retriable: true;
@@ -60,12 +63,14 @@ export interface CheckpointUnsupportedVersionContext {
     readonly parkKind?: CheckpointUnsupportedParkKind;
     readonly runId?: string;
 }
-export declare function checkpointUnsupportedVersionContent(detail: CheckpointUnsupportedVersionDetail, ctx?: CheckpointUnsupportedVersionContext): string;
+export declare function checkpointUnsupportedVersionContent(detail: CheckpointUnsupportedVersionDetail, ctx?: CheckpointUnsupportedVersionContext, lang?: UiLanguage): string;
 export type RefusedParkCode = typeof CHECKPOINT_UNSUPPORTED_VERSION | typeof CHECKPOINT_WALLTIME_AXIS_RETIRED | typeof CHECKPOINT_CONFIG_REFUSED;
 export interface RefusedParkFacts {
     readonly code: RefusedParkCode;
     readonly field?: string;
     readonly stillPending?: boolean;
+    readonly blockedBy?: string;
+    readonly reason?: string;
 }
 export declare function refusedParkFromError(failure: unknown): RefusedParkFacts | null;
 export interface RefusedParkContentInput {
@@ -74,5 +79,5 @@ export interface RefusedParkContentInput {
     readonly lane: 'interactive' | 'print';
     readonly runId?: string;
 }
-export declare function refusedParkContent(input: RefusedParkContentInput): string;
-export declare function refusedParkBlockedContent(taskId: string, lane?: 'interactive' | 'print'): string;
+export declare function refusedParkContent(input: RefusedParkContentInput, lang?: UiLanguage): string;
+export declare function refusedParkBlockedContent(taskId: string, lane?: 'interactive' | 'print', lang?: UiLanguage): string;